Amendment to the Claims 

1. (cxirrently amended) A computer-implemented method for reverting a 
process in an in-line instnmiented state to an uninstrumented state, said method 
comprising: 

receiving a child process having inherited an instrumented parent process' 
context including the parent's program text that may have been modified by 
instrumentation; 

modifying selected text segment portions from said child p rocess: 

unmapping instrumented code space such that said instrumented code 
space is inaccessible to said child p rocess: 

provided an instruction pointer resides in said instrumented code space, 
updating said instruction pointer to xminstrimiented code space; and 

executing said process and, provided said child p rocess generates a fault 
by seeking to access an address in instrumented code space, providing a 
corresponding address in said uninstnmiented code space. 

2. (original) The computer-implemented method for reverting a process in 
an in-line instrumented state to an tminstrumented state as recited in claim 1 
wherein said selected text segment portions are selected from the group 
consisting of: breakpoints, branches, switch tables, procedure lookup tables 
(PLTs) for said instrumented code space. 

3. (original) The computer-implemented method for reverting a process in 

an in-line instrumented state to an iminstrumented state as recited in claim 1 

wherein said instrumented code space is comprised of shared memory. 
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4. (currently amended) The computer-implemented method for reverting 
a process in an in-line instrumented state to an iminstrumented state as recited in 
claim 1 further comprising: unwinding a call stack of said child p rocess and 
recording return addresses of said child p rocess. 

5. (ou-rently amended) The computer-implemented method for reverting 
a process in an in-line instrumented state to an iminstrumented state as recited in 
claim 4 further comprising: comparing said return addresses of said child 
process to said address in said instrumented code space which generated said 
fault upon execution of said child p rocess. 

6. (currently amended) A computer-readable medium embodying 
instructions that cause a computer to perform a method for reverting a process in 
an in-line instrumented state to an uninstrumented state, the method comprising: 

receiving a child process having inherited an instnmiented parent process' 
context including the parent's program text that may have been modified by 
instrumentation: 

modifying selected text segment portions from said child p rocess: 

unmapping instrumented code space such that said instrumented code 
space is inaccessible to said child p rocess: 

provided an instruction pointer resides in said instrumented code space, 
updating said instruction pointer to iminstrumented code space; and 

executing said diild.process and, provided said process generates a fault 
by seeking to access an address in instrumented code space, providing a 
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corresponding address in said uninstrumented code space. 

7. (original) The computer-readable medium of claim 6 wherein said 
selected text segment portions are selected from the group consisting of: 
breakpoints, branches, switch tables, procedure lookup tables (PLTs) for said 
instrumented code space. 

8. (original) The computer-readable medium of claim 6 whereiri said 
instrumented code space is comprised of shared memory. 

9. (currently amended) The computer-readable medium of claim 6 
wherein said instructions further cause said computer to: unwind a call stack of 
said child.process and record retum addresses of said child p rocess. 

10. (currently amended) The computer-readable medium of claim 9 
wherein said instructions further cause said computer to: compare said retum 
addresses of said child process to said address in said instrumented code space 
which generated said fault upon execution of said child p rocess. 

11. (currently amended) An apparatus for reverting a process in an in-line 
instrumented state to an iminstrumented state, the apparatus comprising: 

means for recei ving a child process having inherited an instrumented 
parent process' context including the parent's program text that may have been 
modified bv instrumentation: 
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means for modifying selected text segment portions from said child 
process; 

means for unmapping instrumented code space such that said 
instrumented code space is inaccessible to said child p rocess: 

means for updating an instruction pointer to iminstrumented code space 
provided said instruction pointer resides in said instrumented code space, and 

means for executing said child p rocess and, provided said process 
generates a fault by seeking to access an address in instrumented code space, 
providing a corresponding address in said iminstrumented code space. 

12. (original) The apparatus of claim 11 wherein said selected text segment 
portions are selected from the group consisting of: breakpoints, branches, switch 
tables, procedure lookup tables (PLTs) for said instrumented code space. 

13. (original) The apparatus of claim 11 wherein said instrumented code 
space is comprised of shared memory. 

14. (currently amended) The apparatus of daim 11 further comprising: 
means for unwinding a call stack of said process and recording retum addresses 
of said child p rocess. 

15. (currently amended) The apparatus of claim 14 further comprising: 
means for comparing said return addresses of said child p rocess to said address 
in said instrumented code space which generated said fault upon execution of 
said child p rocess. 
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